Linux

T2 Linux SDE 24.12 'Sky's the Limit!' Released With 37 ISOs For 25 CPU ISAs (t2sde.org) 26

Berlin-based T2 Linux developer René Rebe is also long-time Slashdot reader ReneR — and popped by with a special announcement for the holidays: The T2 Linux team has unveiled T2 Linux SDE 24.12, codenamed "Sky's the Limit!", delivering a massive update for this highly portable source-based Linux distribution... With 3,280 package updates, 206 new features, and the ability to boot on systems with as little as 512MB RAM, this release further strengthens T2 Linux's position as the ultimate tool for developers working across diverse hardware and embedded systems.
Some highlights from Rene's announcement:
  • "The release includes 37 pre-compiled ISOs with Glibc, Musl, and uClibc, supporting 25 CPU architectures like ARM(64), RISCV(64), Loongarch64, SPARC(64), and vintage retro computing platforms such as M68k, Alpha, and even initial Nintendo Wii U support added."
  • " The Cosmic Desktop, a modern Rust-based environment, debuts alongside expanded application support for non-mainstream RISC architectures, now featuring LibreOffice, OpenJDK, and QEMU."

And T2sde.org gives this glimpse of the future:

"While initially created for the Linux kernel, T2 already has proof-of-concept support for building 'home-brew' pkg for Other OS, including: BSDs, macOS and Haiku. Work on alternative micro kernels, such as L4, Fuchsia, RedoxOS or integrating building 'AOSP' Android is being worked on as well."


EU

EU Wants Apple To Open AirDrop and AirPlay To Android (9to5google.com) 47

The EU is pushing Apple to make iOS more interoperable with other platforms, requiring features like AirDrop and AirPlay to work seamlessly with Android and third-party devices, while also enabling background app functionality and cross-platform notifications. 9to5Google reports: A new document released (PDF) by the European Commission this week reveals a number of ways the EU wants Apple to change iOS and its features to be more interoperable with other platforms. There are some changes to iOS itself, such as opening up notifications to work on third-party smartwatches as they do with the Apple Watch. Similarly, the EU wants Apple to let iOS apps work in the background as Apple's first-party apps do, as this is a struggle of some apps, especially companion apps for accessories such as smartwatches (other than the Apple Watch, of course). But there are also some iOS features that the EU directly wants Apple to open up to other platforms, including Android. [...]

As our sister site 9to5Mac points out, Apple has responded (PDF) to this EU document, prominently criticizing the EU for putting out a mandate that "could expose your private information." Apple's document primarily focuses in on Meta, which the company says has made "more interoperability requests" than anyone else. Apple says that opening AirPlay to Meta would "[create] a new class of privacy and security issues, while giving them data about users homes." The EU is taking consultation on this case until January 9, 2025, and if Apple doesn't comply when the order is eventually put into effect, it could result in heavy fines.

Privacy

This VPN Lets Anyone Use Your Internet Connection. What Could Go Wrong? (wired.com) 31

Teenagers using Meta's virtual reality headsets to cheat at the popular game Gorilla Tag are unknowingly selling access to their home internet connections to potential cybercriminals, cybersecurity researchers found. The players have been side-loading Big Mama VPN, a free Android app, onto their VR headsets to create lag that makes it easier to win the tag-based game. However, the app simultaneously operates as a residential proxy service, selling access to users' IP addresses on a marketplace frequented by cybercriminals.

Cybersecurity firm Trend Micro discovered VR headsets were the third most common devices using Big Mama VPN, after Samsung and Xiaomi devices. The company's proxy services have been promoted on cybercrime forums and were linked to at least one cyberattack, according to research from security firms Trend Micro and Kela.
The Internet

Cloudflare 2024: Global Traffic Up, Google Still King, US Churning Out Bots (theregister.com) 11

Cloudflare's 2024 internet traffic report highlights a 17.2% global increase in traffic, with Google maintaining its position as the most visited service and the U.S. responsible for 34.6% of bot traffic. The Register reports: One surprise (or perhaps not) is that IPv6 traffic is actually down as a percentage of the packets that passed through Cloudflare's network. It says that 28.5 percent of global traffic was IPv6 during 2024, whereas last year's report put this figure at 33.75 percent. The company also reveals that a fifth of all TCP connections (20.7 percent) are unexpectedly terminated before any useful data can be exchanged. Causes of this could vary from DoS attacks, quirky client behavior, or a network interrupting a connection to filter content.

Coudflare says about half of these incidents were connections closed "Post SYN" -- after its server has received a client's SYN packet, but before a subsequent acknowledgement (ACK) or any useful data. These can be attributed to DoS attacks or internet scanning, while Post-ACK or Post-PSH anomalies are more often associated with connection tampering activity such as filtering, especially if they occur at high rates in specific networks. Mobile device traffic accounted for about 41.3 percent of the total, which is roughly the same as last year. This is largely split between the Apple and Android ecosystems, with iOS on almost a third and Android accounting for two-thirds. [...]

Google's Chrome appears to be the most popular browser by far, accounting for 65.8 percent of all requests during 2024. Just 15.5 percent came from Apple's Safari browser, which leads the way on iOS devices, naturally. Microsoft's Edge accounted for 6.9 percent of browsing, while Mozilla Firefox stood at 4 percent. For search engines, Google also claimed the top spot, with a greater than 88 percent share of all search traffic that passed through Cloudflare. Yandex and Baidu were next with 3.1 percent and 2.7 percent, respectively, while Bing trailed with 2.6 percent. DuckDuckGo accounted for 0.9 percent of searches.
You can read Cloudflare's full Year in Review here.
Operating Systems

Linux Predictions For 2025 (betanews.com) 104

BrianFagioli shares a report from BetaNews: As we close out 2024, we Linux enthusiasts are once again looking ahead to what the future holds. While Linux has long been the unsung hero of technology, powering servers, supercomputers, and the cloud, it's also a dominant force in the consumer space, even if many don't realize it. With Android leading the way as the most widely used Linux-based operating system, 2025 is shaping up to be another landmark year for the open source world Here are the predictions mentioned in the article:

- Linux will continue to dominate the enterprise sector
- Linux will further solidify its role in powering cloud infrastructure, with major providers like AWS and Google Cloud relying on it.
- Gaming on Linux is set to grow in 2025
- Linux will play a major role in AI development
- Linux's appeal to developers and tech enthusiasts will remain strong
- The open source movement will grow stronger

What additional predictions do you have for Linux in 2025?
Social Networks

Tumblr Adds Reddit-Like 'Communities' (theverge.com) 6

Tumblr is introducing a new Community feature similar to subreddits: in-app groups organized by topic or interest. "Topics include things like film photography, marine biology, LGBTQ, and video games, and each topic has its own landing page where posts shared with the community populate," reports The Verge. From the report: Many of the features mirror Reddit, like a count of how many members are online, moderators, and community guidelines. Posts shared to communities also get a new comments section that's only visible within the group. Communities have the option to be public or private. [...] Communities is available on the web, iOS, and Android.
Android

Epic Games' App Store Will Be Preinstalled On Millions of Android Phones (engadget.com) 43

Epic Games has partnered with Telefonica to pre-install its mobile game storefront on millions of Android devices. Engadget reports: As such, those who buy a phone from a Telefonica network such as O2 or Movistar in Spain, the UK, Germany and Spanish-speaking Latin America will immediately have the app, which offers access to Fortnite, Fall Guys and Rocket League Sideswipe. Epic will bring third-party games to the storefront as well, while the partners plan to offer mobile gamers on Telefonica's networks extra perks over the next year or so. Telefonica has more than 392 million customers. As such, this deal could bring Fortnite and Fall Guys to an even bigger audience.
Android

Google Announces Android XR, Launching 2025 On Samsung Headset (9to5google.com) 6

An anonymous reader quotes a report from 9to5Google: Besides phones and tablets, Android is available on smartwatches, TVs, and even cars. Google today announced Android XR as the next form factor the operating system is coming to. Google is using the catch-all term of extended reality (XR) to describe virtual (VR), mixed (MR), and augmented reality (AR). Android XR is for all device types, including headsets that offer video or optical see-through, screen-less "AI glasses," and AR glasses with displays. Going into Android XR, Google believes it has a proven track record of creating platforms. That is more than just making an operating system for themselves, but also catering to OEM partners, cultivating a developer ecosystem, and managing an app store.

[...] Google says Android XR is the first OS built from the ground up with Gemini. Google and Samsung are starting with the headset, which both consider a good starting point. Samsung has a developer kit called Project Moohan (or "infinity" in Korean) that is lightweight, has an external battery, and powered by the Snapdragon XR2+ Gen 2. Google imagines Android XR headsets as offering an infinite desktop for productivity. In this scenario, you're at a desk with a physical keyboard and mouse. A few partners already have this dev kit and more are being distributed to partners starting this week. Meanwhile, first-party apps like Chrome, YouTube, Google TV, Google Photos, and Google Maps are being optimized for Android XR.

However, glasses are the end goal and frames running Android XR are coming for "directions, translations or message summaries without reaching for your phone," though they are paired like any other wearable. The final realization of this vision is in-lens display. However, Google does not think that displays are a must, and this opens the door to display-less glasses that have microphones and cameras for input, while Gemini capably handles output. Google will "soon begin real-world testing of prototype glasses running Android XR with a small group of users."
With today's launch, Google is releasing the Android XR SDK Developer Preview and an Android XR Emulator.

You can get a glimpse into the world of Android XR via this YouTube video.
Security

Researchers Uncover Chinese Spyware Used To Target Android Devices (techcrunch.com) 34

Security researchers have uncovered a new surveillance tool that they say has been used by Chinese law enforcement to collect sensitive information from Android devices in China. From a report: The tool, named "EagleMsgSpy," was discovered by researchers at U.S. cybersecurity firm Lookout. The company said at the Black Hat Europe conference on Wednesday that it had acquired several variants of the spyware, which it says has been operational since "at least 2017."

Kristina Balaam, a senior intelligence researcher at Lookout, told TechCrunch the spyware has been used by "many" public security bureaus in mainland China to collect "extensive" information from mobile devices. This includes call logs, contacts, GPS coordinates, bookmarks, and messages from third-party apps including Telegram and WhatsApp. EagleMsgSpy is also capable of initiating screen recordings on smartphones, and can capture audio recordings of the device while in use, according to research Lookout shared with TechCrunch.

A manual obtained by Lookout describes the app as a "comprehensive mobile phone judicial monitoring product" that can obtain "real-time mobile phone information of suspects through network control without the suspect's knowledge, monitor all mobile phone activities of criminals and summarize them."

Encryption

Google Criticized for 'Misleading' Encryption Claims About Its Text-Messaging App (daringfireball.net) 63

Google's app store claims that their text-messaging app Google Messages means "conversations are end-to-end encrypted".

"That is some serious bullshit," argues tech blogger John Gruber: It's shamefully misleading regarding Google Messages's support for end-to-end encryption... Google Messages does support end-to-end encryption, but only over RCS and only if all participants in the chat are using a recent version of Google Messages. But the second screenshot in the Play Store listing flatly declares "Conversations are end-to-end encrypted", full stop...

I realize that "Some conversations are end-to-end encrypted" will naturally spur curiosity regarding which conversations are encrypted and which aren't, but that's the truth. And users of the app should be aware of that. "RCS conversations with other Google Messages users are encrypted" would work.

Then, in the "report card" section of the listing, it states the following:

Data is encrypted in transit
Your data is transferred over a secure connection


Which, again, is only true sometimes. It's downright fraudulent to describe Google Messages's transit security this way.... [D]epending who you communicate with — iPhone users, Android users with old devices, Android users who use other text messaging apps — it's quite likely most of your messages won't be secure... E2EE is never available for SMS, and never available if a participant in the chat is using any RCS client (on Android or Apple Messages) other than Google Messages. That's an essential distinction that should be made clear, not obfuscated.

Gruber's earlier blog post had pointed out that the RCS standard "has no encryption; E2EE RCS chats in Google Messages use Google's proprietary extension and are exclusive to the Google Messages app, so RCS chats between Google Messages and other apps, most conspicuously Apple Messages, are not encrypted."

And in his newer post, Gruber adds, "While I'm at it, it's also embarrassing that Google Voice has no support for RCS at all. It's Google's own app and service, and Google has been the world's most vocal proponent of RCS messaging."
Games

Is Valve Letting Third Parties Create SteamOS Hardware? (theverge.com) 48

The Verge thinks Valve "could make a play to dethrone the Sony PlayStation and Microsoft." And it's not just because there's lots of new SteamOS hardware on the way (including a wireless VR headset and a pair of trackable wands, a Steam Controller 2 gamepad, and a living room console.

"Valve has also now seemingly revealed plans for partners to create third-party SteamOS hardware too." It won't be easy to take on Sony, Microsoft, or Meta. Those companies have a lot to lose, and they're deeply entrenched. But the Steam Deck has revealed a massive weakness in each of their businesses that may take them years to correct — the desire to play a huge library of games anytime, anywhere. And while they figure that out, Valve may be building an entire new ecosystem of SteamOS hardware, one that could finally let PC and peripheral makers tap into the huge and growing library of Windows games on all sorts of different hardware without relying on Microsoft or subjecting their customers to the many annoyances of Windows...

Valve has long said it will open up SteamOS to other manufacturers, even recently committing to some direct support for rival handhelds like the Asus ROG Ally — and the other week, Valve quietly updated a document that may reveal its larger overarching strategy. It won't just leave SteamOS sitting around and hope manufacturers build something — it'll hold their hand. Valve now has an explicit label for third parties to create "Powered by SteamOS" devices, which it explicitly defines as "hardware running the SteamOS operating system, implemented in close collaboration with Valve." It additionally lets companies create "Steam Compatible" hardware that ships with "Valve approved controller inputs," as well as SteamVR hardware and Steam Link hardware that lets you stream games from one device to another...

When Valve asked PC manufacturers to sign onto its Steam Machines initiative over a decade ago, with the idea of building living room PC consoles, it asked for a leap of faith with very little to show and a tiny chance of success. It took years for Valve to even build the oddball living room controller for its Steam Machines, and it didn't get far in convincing Windows game developers to port their games to Linux. But by the time it announced the Steam Deck, Valve had hammered out a Proton software compatibility layer so good that many Windows games now run better on Linux, and created the most customizable yet familiar set of controls ever made. If manufacturers could build their own Steam Machines rather than equivalent Windows machines, they could offer better gaming products than they do today. Maybe they'd even want to release a VR headset that isn't tied to Microsoft or Meta if it doubled as a Steam Deck, portably playing decades of flatscreen games.

It's not clear any of this will pan out; Valve is an exceedingly small company that tries not to chase too many things at a time. When I speak to PC industry executives about why they pick Windows over SteamOS, some say they're concerned about whether Valve would truly be able to support them. But it's just as intriguing an idea as it was 12 years ago when Gabe Newell explained the initial vision to us, and this time, there's a far better chance it'll work.

"Today, every major PC company is building one or more Steam Deck rivals," the article points out. "But without Valve's blessing and support, they're saddled with a Windows OS that doesn't start, pause, and resume games quickly and seamlessly enough to feel portable and easy..."
Cellphones

Leaked Documents Show What Phones Secretive Tech 'Graykey' Can Unlock (appleinsider.com) 57

Primarily used by law enforcement, Graykey unlocks mobile devices to extract data from both Android and iOS systems, according to the blog AppleInsider, "though its effectiveness varies depending on the specific hardware and software involved." But while its capabilities are rarely disclosed, "a leak of some Grayshift's internal documents was recently reported on by 404 Media." According to the data, Graykey can only perform "partial" data retrieval from iPhones running iOS 18 and iOS 18.0.1. These versions were released in September and early October, respectively. A partial extraction likely includes unencrypted files and metadata, such as folder structures and file sizes, according to past reports. Notably, Graykey struggles with beta versions of iOS 18.1. Under the latest update, the tool fails to extract any data, as per the documents.

Meanwhile, Graykey's performance with Android phones varies, largely due to the diversity of devices and manufacturers. On Google's Pixel lineup, Graykey can only partially access data from the latest Pixel 9 when in an "After First Unlock" (AFU) state — where the phone has been unlocked at least once since being powered on.

Thanks to long-time Slashdot reader AmiMoJo for sharing the article.
Chrome

Google's Chrome Worth Up To $20 Billion If Judge Orders Sale (msn.com) 92

Alphabet's Chrome browser could go for as much as $20 billion if a judge agrees to a Justice Department proposal to sell the business, in what would be a historic crackdown on one of the world's biggest tech companies. From a report: The department will ask the judge, who ruled in August that Google illegally monopolized the search market, to require measures related to artificial intelligence and its Android smartphone operating system, according to people familiar with the plans.
AI

Former Android Leaders Are Building an 'Operating System For AI Agents' 14

The Verge's Wes Davis reports: A new startup created by former Android leaders aims to build an operating system for AI agents. Among them is Hugo Barra, Google's former VP of Android product management, who says the new company -- named "/dev/agents" -- will revisit the leaders' "Android roots."

"We can see the promise of AI agents, but as a developer, it's just too hard to build anything good," /dev/agents cofounder and CEO and Google's former Android VP of engineering David Singleton told Bloomberg. He said the industry needs "an Android-like moment for AI."

The company is working on a cloud-based "next-gen operating system for AI agents" intended "for trusted agents to work with users across all of their devices," Singleton wrote in a post on X. He said that AI agents will "need new UI patterns, a reimagined privacy model, and a developer platform that makes it radically simpler to build useful agents."
Cellphones

Huawei's Mate 70 Smartphones Will Run Its New Android-Free OS (theverge.com) 80

An anonymous reader quotes a report from The Verge: Huawei has announced its new Mate 70 series smartphone lineup, which will be the first offered with the company's new HarmonyOS Next operating system that doesn't rely on Google's Android services and won't run any Android apps, according to a report by Reuters. The four models of the Mate 70 also don't feature any US hardware following a half decade of US sanctions.

The Mate 70, Mate 70 Pro, Mate 70 Pro Plus, and Mate 70 RS will also be offered with Huawei's HarmonyOS 4.3, which first launched in August 2019 as an alternative to Google's Android OS and is still compatible with Android's extensive app library. Users who decide to opt for Huawei's new Android-free HarmonyOS Next will have less choice when it comes to the apps they can install. Huawei says it has "secured more than 15,000 applications for its HarmonyOS ecosystem, with plans to expand to 100,000 apps in the coming months," according to Reuters.

Starting next year, Huawei also says all the new phones and tablets it launches in 2025 will run HarmonyOS Next. [...] Huawei hasn't confirmed what processors are being used in the Mate 70 lineup, but the company has previously used chips made by China's SMIC for last year's Mate 60 series and other smartphones.

Government

China Wiretaps Americans in 'Worst Hack in Our Nation's History' (gizmodo.com) 91

Longtime Slashdot reader mspohr shares a report from Gizmodo: Hackers for the Chinese government were able to deeply penetrate U.S. telecommunications infrastructure in ways that President Joe Biden's administration hasn't yet acknowledged, according to new reports from the Washington Post and New York Times. The hackers were able to listen to phone calls and read text messages, reportedly exploiting the system U.S. authorities use to wiretap Americans in criminal cases. The worst part? The networks are still compromised and it may take incredibly drastic measures to boot them from U.S. systems.

The hackers behind the infiltration of U.S. telecom infrastructure are known to Western intelligence agencies as Salt Typhoon, and this particular breach of U.S. equipment was first reported in early October by the Wall Street Journal. But Sen. Mark Warner, a Democrat from Virginia, spoke with the Washington Post and New York Times this week to warn the public that this is so much worse than we initially thought, dubbing it "the worst telecom hack in our nation's history." And those articles based on Warner's warnings were published late Thursday.

Hackers weren't able to monitor or intercept anything encrypted, according to the Times, which means that conversations over apps like Signal and Apple's iMessage were probably protected. But end-to-end encryption over texts between Apple devices and Android devices, for instance, aren't encrypted in the same way, meaning they were vulnerable to interception by Salt Typhoon, according to the Times. The details about how the hackers were able to push so deeply into U.S. systems are still scarce, but it has something to do with the ways in which U.S. authorities wiretap suspects in this country with a court order.

AI

DOJ Antitrust Case Aims To Undo Google-Anthropic Partnership (pymnts.com) 6

An anonymous reader quotes a report from PYMNTS: The Justice Department's proposal to resolve its antitrust case over online search against Google reportedly would force the tech giant to unwind its partnership with artificial intelligence (AI) company Anthropic. A recommendation in the Justice Department's court filing Wednesday (Nov. 20) that Google be barred from partnerships with companies that control where consumers search for information, is intended to apply to the company's investment in Anthropic, Bloomberg reported Thursday (Nov. 21). [...]

It was reported in October 2023 that Google had invested $500 million in Anthropic and agreed to contribute another $1.5 billion over time. During that same month, PYMNTS reported that Anthropic's commitment to building and deploying what the company said are generative AI capabilities with stronger built-in guardrails, differentiated it from other foundational AI models on the market. On Tuesday (Nov. 19), the U.K.'s competition watchdog, the Competition and Markets Authority (CMA), cleared Google's partnership with Anthropic, saying that it had determined that the deal between the tech giant and the AI startup did not warrant additional investigation. "The CMA does not believe that Google has acquired material influence over Anthropic as a result of the partnership," the regulator said in its assessment of the arrangement.
U.S. regulators also call for a sale of Google's Chrome browser and restrictions to prevent Android from favoring its own search engine.

"DOJ had a chance to propose remedies related to the issue in this case: search distribution agreements with Apple, Mozilla, smartphone OEMs and wireless carriers," Google said in a Thursday blog post. "Instead, DOJ chose to push a radical interventionist agenda that would harm Americans and America's global technology leadership."
Android

Android's 'Restore Credentials' Feature Will Automatically Log You In To Your Apps On a New Phone (theverge.com) 27

Google is introducing "Restore Credentials," a feature that simplifies transferring app credentials when switching Android devices to keep you logged into your apps. The Verge reports: While some apps already did this, Google is making it easier for developers to include this experience by implementing a "restore key" that automatically transfers to the new phone and logs you back into the app. [...] Restore Credentials requires less work than the previous approach on Android, and can automatically check if a restore key is available and log you back in at the first app launch. A restore key is a public key that uses existing passkey infrastructure to move about your credentials.

Restore keys can also be backed up to the cloud, although developers can opt out. For that reason, transferring directly from device to device will still likely be more thorough than restoring from the cloud, as is the case with Apple devices today. Notably, Google says restore keys do not transfer if you delete an app and reinstall it.

Advertising

The Trade Desk Is Building a CTV OS Called Ventura 28

The Trade Desk, one of the largest publicly traded advertising technology companies in the world, is building a connected television operating system. Axios reports: Existing OS providers, like Roku, Amazon's Fire TV and Google's Android TV, have a conflict of interest because they own content, [CEO and founder Jeff Green] said. Green believes that conflict of interest has muddled the advertising ecosystem for everyone. "We're looking at a concentration around a handful of players that lack objectivity," Green said. "We think we're in a unique position to make the ecosystem better." [...]

Ventura, a nod to the company's headquarters in Ventura, California, will be rolled out to the market in the second half of 2025, Green said. The company has been working to build the system quietly for three years. While some OS developers, such as Google, Amazon and Roku, have also developed their own hardware devices to service their operating systems, Green said The Trade Desk has "no intention of getting into the hardware business." Rather, it will partner with other hardware companies, such as smart TV manufacturers, as well as various television distributors, such as airlines, hotel chains, and gaming companies, to bring its OS to their devices.

Green believes hardware companies will be excited about the opportunity to partner because, in a competitive streaming environment, more hardware companies will need to build advertising businesses to scale. [...] Because The Trade Desk's goal is ultimately to improve a murky marketplace, Green said he isn't looking to make money from the OS directly. Ventura will be successful if it drives more pricing transparency and stronger measurement for the CTV advertising ecosystem writ large, he said. "Ultimately, the measure of success will be, do we have an ad auction that is so transparent that we can predict outcomes?" The Trade Desk will benefit financially from a more transparent ecosystem because it lacks a conflict of interest, Green said.
Google

Google Has Canceled the Pixel Tablet 2 39

AndroidAuthority: Android Authority has learned that Google has canceled the Pixel Tablet 2, the presumed name of Google's second-generation Pixel Tablet. This is disappointing for Pixel fans who were waiting for Google to refresh its first-generation Pixel Tablet with a newer chipset, a better camera, and, more importantly, an official keyboard accessory.

It's also surprising to hear because it might suggest that Google is giving up on its tablet ambitions entirely, considering a separate report published yesterday claimed that Google is also killing the Pixel Tablet 3. However, we have reason to believe that the device cited in yesterday's report is actually the Pixel Tablet 2, and not the third-generation tablet after all. Let me break down how we know.

Slashdot Top Deals